From f56915d99fed380ed7f57d660cecb03dbe8a4ff4 Mon Sep 17 00:00:00 2001 From: Erik Krogh Kristensen Date: Tue, 5 May 2020 13:36:50 +0200 Subject: [PATCH] add change note for js/xss --- change-notes/1.25/analysis-javascript.md | 1 + 1 file changed, 1 insertion(+) diff --git a/change-notes/1.25/analysis-javascript.md b/change-notes/1.25/analysis-javascript.md index cf7a99ac364..48fcbd5ed5e 100644 --- a/change-notes/1.25/analysis-javascript.md +++ b/change-notes/1.25/analysis-javascript.md @@ -21,6 +21,7 @@ | Uncontrolled data used in path expression (`js/path-injection`) | More results | This query now recognizes additional file system calls. | | Uncontrolled command line (`js/command-line-injection`) | More results | This query now recognizes additional command execution calls. | | Client-side URL redirect (`js/client-side-unvalidated-url-redirection`) | Less results | This query now recognizes additional safe patterns of doing URL redirects. | +| Client-side cross-site scripting (`js/xss`) | Less results | This query now recognizes more safe strings based on URLs. | ## Changes to libraries